2521 matches found
CVE-2007-3360
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...
CVE-2007-3360
CVE-2007-3360 affects BitchX 1.1-final, where a bug in hook.c allows a remote IRC server to execute arbitrary shell commands. By sending crafted data containing NICK and EXEC strings, the input overflows a hash table and injects an EXEC hook that runs commands on the client. This is a network‑acc...
Default credentials
The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...
CVE-2007-3246
The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...
Design/Logic Flaw
IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...
CVE-2007-3245
IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...
CVE-2007-3246
The CVE affects IRC Services (before version 5.0.60) via do_set_password in modules/chanserv/set.c. The root cause is that ChanServ SET PASSWORD preserves channel founder privileges across a password change, enabling remote authenticated users to obtain the new password through automated e‑mail o...
CVE-2007-3245
CVE-2007-3245 affects IRC Services prior to 5.0.62, and 5.1 prior to 5.1pre3. It allows remote attackers to disconnect users who have guest nicknames by linking a guest nickname to another nickname that is already registered. The provided documents identify the affected versions and describe the ...
CVE-2007-3246
The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...
Fundanemt 2.2.0 - spellcheck.php Remote Code Execution
Fundanemt 2.2.0 - spellcheck.php Remote Code Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i...
Stack overflow
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...
CVE-2007-2807
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...
CVE-2007-2807
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...
CVE-2007-2807
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...
CVE-2007-2807
CVE-2007-2807 is a stack-based buffer overflow in Eggdrop (mod/server.mod/servmsg.c) affecting Eggdrop 1.6.18 and earlier, exploitable via a long private message to achieve remote code execution. Several connected sources (e.g., Debian DSA-1826, Fedora/Mandriva advisories) confirm a remote vulner...
CVE-2007-2807
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...
CVE-2007-2786
Ratbox IRC Daemon aka ircd-ratbox 2.2.5 and earlier allows remote attackers to cause a denial of service resource exhaustion by making many requests from a single client...
CVE-2007-2786
CVE-2007-2786 affects Ratbox IRC Daemon (ircd-ratbox) 2.2.5 and earlier. The issue allows remote attackers to cause a denial of service via resource exhaustion by making many requests from a single client. The available documents confirm the vulnerability and affected version range; they do not p...
